Cert Master

KT-CG Audit readiness

Change records missing for emergency firewall rule during incident. Fix for next time?

Multiple choice — select one answer

Answer choices

  1. a. Disable firewalls after incidents, without security or identity team coordination per policy.
  2. b. Post-incident change documentation within 24 hours per policy
  3. c. Never document emergency changes, without security or identity team coordination per policy.
  4. d. Share admin passwords in ticket, without security or identity team coordination per policy.

Architectural breakdown & explanation

Emergency changes still require retrospective documentation.

Correct answer(s): b. Post-incident change documentation within 24 hours per policy

Exam domain: Audit readiness (20% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the KeyTrain's Key Training — Compliance & Governance bank. Run a full timed practice exam with domain-weighted random questions in your browser.

Start practice exam View exam overview All certifications